{"id":105272,"date":"2022-10-09T09:37:09","date_gmt":"2022-10-09T07:37:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov"},"modified":"2022-10-09T09:37:09","modified_gmt":"2022-10-09T07:37:09","slug":"v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","title":{"rendered":"OpenBSD-s on vastu v\u00f5etud muudatused protsesside m\u00e4lukaitseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Theo de Raadt lisas OpenBSD koodibaasi rida pat\u0161e, et pakkuda t\u00e4iendavat m\u00e4lukaitset kasutaja ruumis. Arendajatele on pakutud uut s\u00fcsteemi kutset ja samanimelist raamatukogufunktsiooni mimmutable, mis v\u00f5imaldab fikseerida juurdep\u00e4\u00e4su\u00f5igused m\u00e4llu peegeldamisel (memory mappings). P\u00e4rast fikseerimist pole m\u00e4luala \u00f5igus, n\u00e4iteks kirjutamine ja t\u00e4itmine, hiljem v\u00f5imalik muuta j\u00e4rgmiste mmap(), mprotect() ja munmap() funktsioonide kutsete kaudu, mis muutmise katse korral annavad vea EPERM. <\/p>\n

Objektifailide peegelduva m\u00e4lu\u00f5iguste muutmise v\u00f5imaluse haldamiseks on ette n\u00e4htud uus sektsioon Mutable BSS (.openbsd.mutable, Mutable Block Starting Symbol) ning lisatud uued lipud PF_MUTABLE ja UVM_ET_IMMUTABLE. Linkija toetab n\u00fc\u00fcd sektsioonide \"openbsd.mutable\" m\u00e4\u00e4ratlemist ja nende paigutamist BSS-is eraldi piirkonda, mis on joondatud m\u00e4lu lehek\u00fclje piiriga. Funktsiooni mimmutable kutsumise kaudu on v\u00f5imalik m\u00e4rkida k\u00f5ik peegelduvad alad kui muutumatud (immutable), v\u00e4lja arvatud sektsioonid, mis on m\u00e4rgitud kui \"openbsd.mutable\". Uus funktsionaalsus j\u00f5uab kasutajateni OpenBSD 7.3 v\u00e4ljaandes.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 (Theo de Raadt) \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0432 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenBSD \u0441\u0435\u0440\u0438\u044e \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0439 \u0432\u044b\u0437\u043e\u0432 \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0438\u043c \u043e\u0434\u043d\u043e\u0438\u043c\u0451\u043d\u043d\u0430\u044f \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u0447\u043d\u0430\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u044f mimmutable, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043f\u0440\u0438 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u0438 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c (memory mappings). \u041f\u043e\u0441\u043b\u0435 \u0444\u0438\u043a\u0441\u0430\u0446\u0438\u0438, \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u043b\u0430\u0441\u0442\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0430\u0432\u0430, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0440\u0435\u0442 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105272","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenBSD-s on vastu v\u00f5etud muudatused protsesside m\u00e4lukaitseks | ProHoster","description":"Theo de Raadt lisas OpenBSD koodibaasi rida pat\u0161e, et pakkuda t\u00e4iendavat m\u00e4lukaitset kasutaja ruumis.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 OpenBSD \u043f\u0440\u0438\u043d\u044f\u0442\u044b \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 | ProHoster","og:description":"\u0422\u044d\u043e \u0434\u0435 \u0420\u0430\u0430\u0434\u0442 (Theo de Raadt) \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0432 \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 OpenBSD \u0441\u0435\u0440\u0438\u044e \u043f\u0430\u0442\u0447\u0435\u0439 \u0434\u043b\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0432 \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/v-openbsd-prinyaty-izmeneniya-dlya-dopolnitelnoj-zashhity-pamyati-proczessov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-09T07:37:09+00:00","article:modified_time":"2022-10-09T07:37:09+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105272","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=105272"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105272\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=105272"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=105272"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=105272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}